CVEs published in September 2020
1,908 vulnerabilities, 200 critical, 8 exploited.
ngx-mdnpmCross-Site Scripting in ngx-mdNo score@commercial/subtextnpmPrototype Pollution in @commercial/subtextNo score@commercial/hapinpmDenial of Service in @commercial/hapiNo score@hapi/hapinpmDenial of Service in @hapi/hapiNo scorehapinpmDenial of Service in hapiNo score@hapi/peznpmPrototype Pollution in @hapi/subtextNo scorepeznpmPrototype Pollution in pezNo scorecontentnpmDenial of Service in contentNo score@commercial/subtextnpmDenial of Service in @commercial/subtextNo score@hapi/contentnpmDenial of Service in @hapi/contentNo score@hapi/ammonpmDenial of Service in @hapi/ammoNo score@hapi/acceptnpmDenial of Service in @hapi/acceptNo scoreammonpmDenial of Service in ammoNo scoremarky-markdownnpmHTML Injection in marky-markdownNo scoremarky-markdownnpmHTML Injection in marky-markdown7.3 High- thomsonreuters eikonThomson Reuters Eikon 4.0.42144 allows all local users to modify the service executable file...7.8 High
- enghouse web chatEnghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the...6.1 Medium
- freebsd, midnightbsd +1 moreIn MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer...5.5 Medium
- freebsd, midnightbsd +1 moreA memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD...5.5 Medium
- setelsa-security conacwinSetelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This...7.5 High
- maracmsAn arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must...7.2 High
- erambaeramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached...5.4 Medium
- erambaeramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has...9.8 Critical
- autoptimizeThe ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file...7.2 High
- rapid7 nexposeUnquoted Path in Rapid7 Nexpose Installer6.8 Medium
- rapid7 nexposeCode Injection in Rapid7 Nexpose Installer5.8 Medium
- ibm api connectIBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege...7.2 High
- ibm api connectIBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks...6.5 Medium
- php-fusionPrivilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user ...8.8 High
- oscommerce ce phoenixSeveral XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject...6.1 Medium
- obstack project obstackUnaligned references in Obstack7.5 High
- simple-slab project simple-slabOff-by-one error in simple-slab7.5 High
- simple-slab project simple-slabOut of bounds read in simple-slab9.1 Critical
- ordnung project ordnungDouble free in ordnung7.5 High
- ordnung project ordnungOut of bounds read in ordnung7.5 High
- gruntjs grunt, canonical ubuntu linux, debian linux +2 moreArbitrary Code Execution7.1 High
addaxnpmCommand Injection in addaxNo scoreexpressfsnpmCommand Injection in expressfsNo scorenode-wifinpmCommand Injection in node-wifiNo scoresails-mysqlnpmSQL Injection in sails-mysql7.5 High- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapEcommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views...6.1 Medium
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapEcommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views...6.1 Medium
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapEcommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views...6.1 Medium
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapEcommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views...6.1 Medium
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapEcommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views...6.1 Medium
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapEcommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/vendor/views...6.1 Medium
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapEcommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in _parts/header.php, within...6.1 Medium
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapEcommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in blog.php. within application...6.1 Medium
- cloud foundry routing, cloudfoundry gorouter, cloud foundry cf deployment +1 more +3 moreGorouter is vulnerable to DoS attack via invalid HTTP responses7.7 High
- cloud foundry capi, cf deployment, cloudfoundry capi-release +1 more +3 moreCloud Controller allows users with no roles to list droplets3.1 Low
- Show moreLoading…